Heur/malware

  • Thread starter Thread starter Guest
  • Start date Start date
G

Guest

Install the Avira AntiVirus and unpon reboot, it say it found a file that
contains suspicious code Heur/malware at location
c:\winnt\system32\ratbgpi.dll. it gives me the option of quaratine/deny
access. Choosing either option, the message still remains even after clicking
many times
I have also run AVG and Spybot 1.4 and all give a clean health.Any
suggestion please, thanks
 
labfuji said:
Install the Avira AntiVirus and unpon reboot, it say it found a file that
contains suspicious code Heur/malware at location
c:\winnt\system32\ratbgpi.dll. it gives me the option of quaratine/deny
access. Choosing either option, the message still remains even after clicking
many times
I have also run AVG and Spybot 1.4 and all give a clean health.Any
suggestion please, thanks
Click to expand...


try just plain renaming it (such as ratbgpi.xxx)
and if your system runs ok then delete it entirely
 
labfuji said:
Tried in normal and safe mode, cannot be renamed, it says 'file been used by
windows'
Click to expand...


Then you will need to find out where the process is starting.


You may have to look in the registry


HKEY_LOCAL_MACHINE
software
microsoft
windows
current version
run


then delete the reference
 
expand run>optional components>
right pan
IMAIL>default REG_SZ value not set
installed REG_SZ 1

MAPI>default REG_SZ value not set
installed REG_SZ 1
NoChange REG_SZ 1


MSFS>default REG_SZ value not set
installed REG_SZ 1

So which DATA should I delete or modify

Appreciate your follow, thanks
 
labfuji said:
expand run>optional components>
right pan
IMAIL>default REG_SZ value not set
installed REG_SZ 1

MAPI>default REG_SZ value not set
installed REG_SZ 1
NoChange REG_SZ 1


MSFS>default REG_SZ value not set
installed REG_SZ 1

So which DATA should I delete or modify

Appreciate your follow, thanks


"
Click to expand...


Those entries look normal
so it's got to be somewhere else.

Off hand I do not know which process it would be
 
Back
Top